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Synchronizing Network Time with NetWare Time 
Management 


Synchronizing time across the NetWare® network lets you maintain consistent time stamps. 


NetWare needs to maintain a common system time for keeping file date and time stamps correctly, 
for auditing and logging, and for managing users’ login time restrictions. It is also important to 
maintain a common time for the entire network system of servers and workstations. 


The NetWare server utility TIMES YNC.NLM ensures that all NetWare servers report the same 
time and order events correctly. In a multiple server environment, the functionality to maintain a 
common time for all NetWare servers in the network is referred to as time synchronization. 


A common time across the network helps eDirectory™, messaging service, the file system, and 
other similar services. 


This documentation covers the following topics: 
+ “How Timesync Works” on page 7 
+ “Configuring Timesync on Servers” on page 15 


+ “Timesync Problems” on page 23 


Documentation Updates 


For the most recent version of this Network Time Management Administration Guide, see the Open 
Enterprise Server Documentation Web site (http://www.novell.com/documentation/oes/time_enu/ 
data/hl5k6r0y.html#bktitle). 


Documentation Conventions 


In this documentation, a greater-than symbol (>) is used to separate actions within a step and items 
in a cross-reference path. 


A trademark symbol e, ™, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party 
trademark. 


When a single pathname can be written with a backslash for some platforms or a forward slash for 
other platforms, the pathname is presented with a backslash. Users of platforms that require a 
forward slash, such as Linux* or UNIX*, should use forward slashes as required by your software. 
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How Timesync Works 


Time synchronization is accomplished by designating a server or a group of servers to provide time 
for all other servers and client workstations in the network. 


By default, Timesync is loaded with NetWare®. To make XNTPD load by default, edit the 
sys:\system\timeserv.ncf file. 


The following sections can help you to understand Timesync: 


+ 


+ 


“Timesync Terminology” on page 7 


“Identifying Timesync Server Types” on page 9 


Timesync Terminology 


This documentation uses the following terms: 


+ 


Time provider 


A NetWare server that provides time to other NetWare servers so they can synchronize their 
time with the time provider. 


Time consumer 


A NetWare server that seeks time from other NetWare servers to synchronize its time. This 
server can also act as a time provider for other servers and client workstations on the network. 


NTP time provider 


A server that understands the Network Time Protocol (NTP) and provides NTP time to other 
servers or to workstations on the network. 


NTP time consumer 


A server that understands the NTP protocol and seeks NTP time from other NTP time provider 
to synchronize its time. 


Time provider group 
A set of servers that are configured to ensure fault tolerance and optimal network usage. 
The time provider group helps to keep the network traffic at a minimum. 


A time provider group requires at least one server to be designated as a time provider in the 
group. Other servers in the group can help to minimize traffic by spreading across geographic 
locations, thereby minimizing traffic across routers and WANs. Additionally, other servers or 
workstations consume time from this time provider group. 


Timesync network can be configured using one of the following time provider groups: 
+ Configuring a Time Provider Group in a Forced Scenario (page 15) 


+ Configuring a Time Provider Group in a Voted Scenario (page 16) 
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The following figure shows a time provider group with the Reference time server at one level. 
The Reference time server provides time to Primary time servers. At the next lower level, the 
time provider group consists of Primary time servers that provide time to Secondary time 
servers. Each of these servers can provide time to their workstations. 


Figure 1 Time provider group with a reference time server 
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The following figure illustrates a network using an external time server that provides time to 
two Reference time servers, which are geographically distant. 
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Figure 2 Two Reference time servers using an external time source 
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Identifying Timesync Server Types 


To use Timesync, you must configure the NetWare servers. Timesync configuration allows some 
servers to be time providers and other servers to follow the time providers and become time 
consumers. Time consumers can provide time to the workstations and other servers in the network. 


The following are Timesync server types that you must use to configure Timesync. 
¢ Single Time Server (page 10) 
Reference Time Server (page 10) 
¢ Primary Time Server (page 11) 
¢ Secondary Time Server (page 12) 


NOTE: All Timesync servers can accept or provide time from and to NTP providers and consumers. There is 
a built-in NTP time consumer and NTP time provider in Timesync for this purpose. Timesync is not fully 
compliant with NTP. 


For a quick reference on time server configuration, see “Configuration Checklist for Time Servers” on page 12. 
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Single Time Server 
A Single time server provides time to Secondary servers and workstations. 


A Single server can obtain time from a NTP time provider or from its own internal clock. This 
server acts as a master time provider to the Timesync network. 


The Single time server falls back to the local clock if both of the following cases are true: 
+ Ifthe NTP time provider is not contactable 


¢ the Single time server has remained in synchronization with the NTP source for more than 10 
minutes of polling delay 


By default, the first server installed on a eDirectory tree is configured as a Single time server and 
other NetWare servers in the eDirectory tree are configured as Secondary time servers. 


All other servers must be able to contact the Single time server to synchronize or change time on 
the network. The network administrator sets the time on the Single time server. 


IMPORTANT: There can be only one Single time server in a eDirectory tree. There can be only one Single 
time server in a Timesync network. 


The following figure illustrates a Single time server providing time to Secondary time servers. The 
Secondary time servers, in turn, provide time to their workstations. 


Figure 3 A single time server providing time to secondary time servers 
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Reference Time Server 


A Reference time server provides time to Primary and Secondary servers, including workstations. 
A Reference time server can obtain time from an NTP time provider. 


A Reference time server will fall back to its local clock if time sources are not configured. 
Otherwise, it will fall back to its local clock if any one of these conditions is true: 


¢ All its configured sources are not contactable 


¢ All its configured sources are not in sync 


Reference time servers do not adjust their internal clocks; instead, the Primary time servers’ 
internal clocks are adjusted to synchronize with the Reference time server. A Reference time server 
acts as a central point to set network time. At server startup, the hardware clock is set to the time 
obtained from its external time source. 
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More than one Reference time server can coexist in one Timesync network. 


The following figure shows a Reference time server synchronized to an external clock. The 
Reference time server, in turn, provides time to its own secondary servers and workstations, as well 
as to the Reference time server at another location. 


Figure 4 A reference time server synchronized to an external clock 
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Primary Time Server 


A Primary time server synchronizes the time with a Reference time server or an external NTP 
source. These servers can provide time to Secondary time servers and workstations. Primary time 
servers are also designed to share time with other primary servers. Primary servers are used to vote 
(calculate a common offset) amongst each other and arrive at a common network time. Here, the 
time from Reference time server will have more weight age than the primaries. 


Use the Primary time server on larger networks to increase fault tolerance by providing redundant 
paths for Secondary time servers. If a Primary time server goes down, the Secondary time server 
can get the time from an alternate Primary time server. 


Primary server should have at least one primary and one reference time source to be synchronized 
properly. Otherwise, though the server is synchronized, it will be in suspected or non fault tolerant 
state. 


The Primary time server falls back to the local clock if both of the following cases are true: 
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+ Ifthe NTP time provider is not contactable 


¢ the Primary time server has remained in synchronization with the NTP source for more than 
10 minutes of polling delay 


Secondary Time Server 


A Secondary time server obtains the time from a Single, Primary, or Reference time server. It 
provides time to other Secondary time servers and workstations on the network. It adjusts its 
internal clock to synchronize with the network time. It provides the time to workstations, but it 
does not participate in determining the correct network time. 


If you designate a server on the network as a Single time server, designate all other servers on the 
network as a Secondary time servers. 


If you designate several servers on the network as Primary or Reference time servers, designate all 
other servers on the network as Secondary time servers. 


Configuration Checklist for Time Servers 


The following table lists the time providers and time consumers that can be connected to each 


other. 

Time Provider Time Consumer Is Configuration Allowed? 

Single time server Single time server Not allowed 
Reference time server Not allowed 
Primary time server Not allowed 
Secondary time server Allowed 
NTP client time consumer Allowed 

Reference time server Single time server Not allowed 
Reference time server Allowed 
Primary time server Allowed 
Secondary time server Allowed 
NTP client time consumer Allowed 

Primary time server Single time server Not allowed 
Reference time server Allowed 
Primary time server Allowed 
Secondary time server Allowed 
NTP client time consumer Allowed 

Secondary time server Single time server Not allowed 
Reference time server Not allowed 
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Time Provider 


NTP Server time provider 


Time Consumer 

Primary time server 
Secondary time server 
NTP client time consumer 
Single time server 
Reference time server 
Primary time server 
Secondary time server 


NTP client Time Consumer 


Is Configuration Allowed? 
Not allowed 

Allowed 

Allowed 

Allowed 

Allowed 

Allowed 

Allowed 


(Not applicable) 
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Configuring Timesync on Servers 


The following sections explain how to plan, set up and configure Timesync on the network: 
+ “Configuring a Time Provider Group in a Forced Scenario” on page 15 
+ “Configuring a Time Provider Group in a Voted Scenario” on page 16 
+ “Guidelines for Time Synchronization” on page 17 
+ “Using SET Parameters to Configure Timesync” on page 17 


¢ “Setting Timesync SET Parameters Consistently” on page 20 


Configuring a Time Provider Group in a Forced Scenario 


Forced scenario is the default configuration that is set up during the installation. This 
configuration is set if all time consumers are in the same tree as the time provider. 


In a forced scenario, Timesync uses one time provider and other servers synchronize their time 
with it. The time provider is a Single time server and other servers are Secondary time servers. 


Configuration has the following advantages: 
¢ Simple and easy configuration. 


è Fewer than 30 NetWare® servers. This limitation ensures that the Single time server is not 
overloaded with time requests. 


¢ Ifall servers that need synchronization are in one tree, this is the default configuration after 
installation. 


¢ Since the synchronization hierarchy is at two levels only, synchronization errors are 
minimized. 


The disadvantages of this configuration are the following: 


¢ This server configuration lacks fault tolerance. If the time server loses connection for an 
extended period of time, Secondary time servers will not sync with the network time. With 
only one time source, there is only one point of failure. 


+ This server configuration has a fan-out of around 30 servers only. The Single time server must 
be contacted by every server on the network. This leads to heavy loading of the Single time 
server and communication problems on networks with slow or over utilized LAN/WAN links. 


The first server installed in the tree is configured by default as the Single time server. Subsequent 
servers are configured as Secondary time servers that seek time from the Single time server. 


Single time servers cannot coexist with Primary and Reference time servers. This also implies that 
the Single time server does not exchange time information with Primary and Reference time 

servers. Single time servers advertise their existence through SLP/SAP in TCP/IPX™. Therefore, 
other servers installed in the same tree subsequently will not be configured as Single time server. 
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These servers will be configured as Secondary time servers with the Single time server as the time 
source. 


To set up Timesync in a forced scenario: 
1 Configure one server as the Single time server. 


2 Configure all other servers as Secondary time servers and specify the Single time server as the 
time source for these servers. 


For more information about Timesync SET parameters, see “Using SET Parameters to Configure 
Timesync” on page 17. 


NOTE: Only Single servers can advertise the Timesync service through SLP/SAP. Only Secondary servers 
can auto-discover Single servers (in the same tree) through SLP/SAP. 


Configuring a Time Provider Group in a Voted Scenario 
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Ina Voted scenario configuration, you plan and customize the time synchronization on the servers. 
In this configuration, identify the servers on the network that will be time sources and the servers 
that will follow the identified time source. 


This server configuration is adequate for networks with the following conditions: 

+ More than 30 NetWare servers 

+ Needs to be customized and is not configured by default, during installation. 
To customize time synchronization, follow this approach: 

+ Create a hierarchical structure for the servers. 

+ The time servers at the topmost-level are closely synchronized. 

+ The servers at each lower level are synchronized to servers at the next-level up. 
The voted configuration for time synchronization: 

+ Allows complete control of the time synchronization hierarchy 

+ Optimizes the network traffic and distribute time sources around the network 


+ Adds robustness to the synchronization hierarchy by adding alternate time sources that servers 
should use in case of network failures 


+ More than one Reference time server can coexist on a Timesync network, but both the servers 
must be synchronized with each other. An external time source may be used for this purpose. 


Voted configuration requires careful planning, especially on a large network. You should also 
consider that adding new time sources requires that the configuration files on several other servers 
should be updated. 

Checklist for Voted Time Synchronization 


Follow this checklist for a custom configuration: 


Q) If more than one eDirectory™ tree is on the same network, will the trees be time synchronized 
independently or together? 


Q Which servers will be time sources (Primary and Reference time servers) and which servers 
will be Secondary time servers? 
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m) 


0 


Will time synchronization rely on SAP/SLP, a configured sources list, or a combination of the 
two? 


In a custom configuration, eliminate the use of SAP/SLP by using the following parameters 
in the configuration file: 


service advertising = off 
configured sources = on 
If the servers will use a configured sources list, which servers will contact which time sources? 


Will more than one Reference time server be required? If so, what external time sources will 
be used to synchronize these servers? 


Guidelines for Time Synchronization 


The following guidelines can help you to organize the hierarchy structure for the servers: 


+ 


Whenever possible, specify Secondary time servers to synchronize with time sources. In this 
case, the time sources are Primary, Single, or Reference time source. 


Keep to a minimal number of time sources to reduce the network traffic. The number of packet 
exchanges between two servers doubles during each polling interval. 


Use time sources to provide local access throughout the network. On a large network, the use 
of multiple time sources can reduce the overall traffic across routers. 


Avoid using Primary time servers across WAN. This will minimize the traffic across WANs 
for time synchronization that may occur due to voting. 


If you are configuring for a multiple network, distribute Primary time servers strategically 
across the WAN infrastructure. This will reduce the WAN traffic by providing a time source 
for Secondary time servers and client workstations at each location. 


If the WAN infrastructure requires more than seven Primary time servers in the time provider 
group, implement additional time provider groups as necessary. Ensure that each Reference 
time server is synchronized to the same time source. 


All other servers in the network should be designated as Secondary time servers. 


Using SET Parameters to Configure Timesync 


Timesync uses the following SET parameters. For more information, see “SET” in Utilities 
Reference for OES. 


Parameter Explanation 


start of daylight savings Local date and time when the switch onto daylight savings time 
time = date_and_time should occur. Formats include a simple date and time or rules 


introduced by an parentheses "( ". 


For example: April 4 1993 2:0:0 am, (April 4 2:0:0 am), (April 
Sunday <= 1 2:0:0 am), or (April Sunday First 2:0:0 am). 


Only rules can reschedule for the next year. You must set both 
the start and end dates before either will be scheduled. 
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Parameter 


end of daylight savings 
time = date _and_time 


daylight savings time 
offset = [+|-] 
hour: minute: second 


timesync configured 
sources = on|loff 


timesync polling count = 
number 


timesync polling interval 


= number 


timesync reset = on|off 


timesync restart flag 


timesync service 
advertising = on|off 


timesync synchronization 
radius = value _in_seconds 
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Explanation 


Local date and time when the switch off of daylight savings time 
should occur. Formats include a simple date and time or rules 
introduced by an open parentheses "( ". 


For example: October 31 1993 2:0:0 am, (October 31 2:0:0 
am), (October Sunday <= 31 2:0:0 am), or (October Sunday last 
2:0:0 am). 


Only rules can reschedule for the next year. You must set both 
the start and end dates before either will be scheduled. 


The offset applied in time calculations when daylight savings 
time is in effect. 


The default is +1:00:00 (one hour). 


Issuing this command causes UTC time to be recalculated from 
local time. 


Default: +1:00:00 


When On, this server does not listen to advertising time 
sources. Instead it only contacts sources explicitly configured 
with the Time Sources parameter. 


Default: Off 


Specifies the number of time packets to exchange while polling 
with the time provider. 


Default: 3 


Specifies when the next polling is scheduled. 


Default: 600 


When set to On, Timesync resets the selected internal values 
and clears the configured server list. 


The flag automatically sets to Off. 
Default: Off 


When set to On, Timesync will restart. The flag automatically 
resets to Off. 


Default: Off 


When On, this time source advertises itself using SAP/SLP. 
Secondary time servers never advertise. 


Default: On 


Specifies the maximum tolerance. 


Timesync remains in synchronization while the offset is lesser 
than this value. 


Default: 2000 
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Parameter 


timesync time adjustment= 
[+]- 

j hour: minute: second[at 
month/day/year 

hour: minute:second [AM or 
PM] ] 


timesync time source: 
IP_address 


timesync type = 
primary |single|reference| 
secondary 


timesync max log file size 
= number 


standard time offset time 
zone = IST [Time offset 
from IST] 


default time server type = 
primary |single|secondary | 
reference 


Explanation 


Schedule a time adjustment. Can only be issued from a Single, 
Reference, or Primary type server. 


The format is [+|-]hh:mm:ss [AT [date and time]]. Default date 
and time is six polling intervals or one hour (whichever is 
longer) from now. 


Using the word CANCEL instead of a date to cancel a 
previously scheduled adjustment. 


Single and Reference time servers do not accept adjustments 
from Primary time servers. 


Default: None scheduled 


This server contacts the servers in this list as time providers. 


Each time server (IP address, DNS Name) in this list is 
separated by a semicolon (; ). 


For example: a semicolon (; ) clears the list MyServer and 
specifies that MyServer is the NetWare time source. 


MyServer:123; specifies that MyServer is a NTP time source. 
Default: Empty list 


Specifies the Timesync server type: Single, Reference, 
Primary, or Secondary. 


Default: Single 


Specifies the largest size in kilobytes of the 
SYS:\SYSTEM\TIMESYNC.LOG file. 


Range: 500 to 1,073,741,824 


Enter the offset in hours from Universal Time Coordinated 
(UTC). 


Time zone string indicates the abbreviated name of the time 
zone, the offset from UTC, and the alternate abbreviated time 
zone name to be used when daylight savings time is in effect. 


The default is <>. Issuing this command causes UTC time to be 
recalculated from local time. 


Default: Selected during installation 
Specifies the default time synchronization server type. 
Choose from Secondary, Primary, Reference, or Single. 


This parameter can be overridden by separate time 
synchronization parameters. 


Default: Secondary 
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Parameter Explanation 


debug flag = 0/7/15 Specifies whether Timesync opens or logs a debug screen to 
view or log debug information. 


To enable the debug screen and log it to timesync.log (located 
in sys:\system): 


set timesync debug=15 
To enable the debug screen only and disable the log: 
set timesync debug=7 


To disable both the debug screen and logging: 


set timesync debug=0 


For more information about advanced usage of debug flag, see 
“Advanced Usage for Debug Flag” on page 20. 


Advanced Usage for Debug Flag 


Timesync debug screen information is logged into the sys:\system\timesync.log file. The 
following table displays the usage of debug flag: 


Value Debug Screen Message Debug Screen Logging 
0 OFF OFF 

7 ON OFF 

15 ON ON 


Setting Time Backwards 


Setting the time backwards is not recommended for the following reasons: 


+ Impacts eDirectory drastically, as synchronizing of objects across eDirectory is dependent on 
timestamps. 


¢ eDirectory considers this as synthetic time. 


¢ To ensure consistent timestamps across eDirectory, DSREPAIR.NLM provides an interface to 
declare a new epoch. This results in very high traffic to restamp all eDirectory objects. 


The standard practice, before starting a NetWare server, is to ensure that the time is as close as 10 
minutes to the network time. This prevents many time synchronization issues. 


Setting Timesync SET Parameters Consistently 


Configure the SET Timesync parameters consistently on the network to avoid time 
synchronization conflicts on large networks. 


The following parameters are interdependent across the servers: 
* set timesync service advertising = on|loff 


All servers should be configured the same (On or Off) for this parameter to be effective. 
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This parameter has no effect on time consumers (Secondary time servers). 
set timesync configured sources = on|loff 


When On, this server does not listen to SAP/SLP Timesync services. The time source for this 
server will be taken from the timesync configuration file. 


set timesync time sources 


This parameter identifies a time provider by server name or IP address. To use a NTP time 
source, prefix the server name or IP address with :123. Here, 123 indicates the standard 
NTP port. For Timesync to use this parameter, set timesync configured sources SET 
parameters to On. The time servers specified in the configured sources overrides servers 
discovered by any SAP/SLP, if configured sources Timesync SET parameters is set to On. 


set default time server typ 


The SET Timesync Type parameter always overrides this parameter. 
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Troubleshooting TimeSync 


Use the information in this section to analyze and troubleshoot problems. 


Timesync Problems 


+ “Time Zone Problem” on page 23 
¢ “Synthetic Time Problem” on page 23 
+ “Timesync in a Forced Scenario” on page 23 


+ “Time Synchronization Fails on a NetWare 6.5 Server if it is Installed as a Secondary Time 
Server in a NetWare 4.x Tree” on page 24 


+ “The Monitor Screen Hangs” on page 24 


Time Zone Problem 


Problem: Users are logged out at incorrect times or time restrictions are shown incorrectly or LASTLOGIN 
displays an incorrect time. 


Possible Cause: The time zone is not set correctly. 
Action: Use one of the following commands to set the time zone: 
* set tz=timezone in autoexec.bat 


* DOS SET TZ=timezone in login script 


Synthetic Time Problem 


Problem: The NetWare® server reports the following error: 


Synthetic time is being issued on partition. 


Possible Cause: In NetWare 4 and later versions, synthetic time is issued at a server with the error DS- 4.63-12 
if the server time is set backwards. The synthetic time is cycled every two minutes until the server 
time is later than the last modified time stamp. 


Action: Run DSREPAIR. 


Click Advanced Options > Replica and Partition Operations, and then select the partition you want 
to update. 


Timesync in a Forced Scenario 
Problem: Timesync in a forced scenario might not work in some setups. 
Action: To resolve this, do the following: 


1. Set Timesync Configured Sources = ON 
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2. Specify the IP address, DNS name, or file server name of the time source in the Timesync 
Time Sources parameter. 


Time Synchronization Fails on a NetWare 6.5 Server if it is Installed as a Secondary Time Server in a 
NetWare 4.x Tree 


Problem: Ifyou try to install a NetWare 6.5 server as a secondary time server (with default configuration) 
into a NetWare 4.x tree, time synchronization will fail on the NetWare 6.5 server. 


Action: To resolve this, do the following: 
1. Give the file server the name of NetWare 4.x server in Timesync Time Sources without: 123 


2. Set Timesync Configured Sources = ON 


The Monitor Screen Hangs 
Problem: The Monitor screen hangs for a minute. 
Possible Cause: An invalid IP address is given as the time source and the RESET flag is pressed. 


Action: Give a valid IP address and proceed. 
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